Snort mailing list archives
Re: Fwd:
From: Bjoern Meier <bjoern.meier () gmail com>
Date: Tue, 29 Jan 2013 22:12:54 +0100
hi, 2013/1/29 Jeff Jarmoc <jeff () jarmoc com>
Obfuscated redirect to hxxp://www.news.com.december.bestdrops.2012.fxsprime<dot>com That site in turn gives a 302 to pinterest. Weird that it doesn't seem to do anything; maybe it's fingerprinting browsers? HTTP/1.1 302 Moved Temporarily Server: nginx/1.2.6 Date: Tue, 29 Jan 2013 20:00:11 GMT Content-Type: text/html Content-Length: 160 Connection: keep-alive Location: hxxp://www.pinterest.com/ P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
has changing the UA an effect on this site? Maybe it's hiding something more- I often used this to let the server give a 200er only if you have a right UA. So, no need of hashing passwords or something like that. Greetings, Björn
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!